QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
critical
Cisco / Priority 100
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Cisco found several security weaknesses in its Secure Email Gateway and Secure Email and Web Manager products during internal testing, including two that attackers are exploiting now. These weaknesses could let attackers access or control systems improperly. Cisco has issued software updates to fix these issues and strongly urges customers to upgrade their systems. No temporary workarounds are available.
- Published
- 14 Oct 2026
- CVSS
- Not scored
- Verified
- 14 Oct 2026
critical Exploitation reported
Cisco / Priority 100
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco Secure Email Gateway has a critical security flaw in its Advanced Malware Protection feature. An attacker who is not logged in can send a malicious email with a specially crafted attachment that lets them write files anywhere on the server's operating system. This can let them run commands with full administrative privileges. Cisco has issued software updates to fix this issue, but no other workarounds are available.
- Published
- 14 Oct 2026
- CVSS
- Not scored
- Verified
- 14 Oct 2026
critical Exploitation reported
Microsoft / Priority 100
CVE-2026-98186: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
A critical vulnerability was discovered in the wifi driver component called mwifiex used in certain Linux kernels on Azure Linux 3.0. The issue involved improper bounds checking when processing certain wireless encryption data, which could allow an attacker to cause serious security problems. Microsoft has released a security update that corrects this by properly limiting how the data is processed.
- Published
- 13 Oct 2026
- CVSS
- 9.8
- Verified
- 15 Oct 2026
critical Exploitation reported
Microsoft / Priority 100
CVE-2026-98339: wifi: cfg80211: don't filter by BSS type when removing stale entries
A serious security flaw was found in the wifi management component of the Azure Linux 3.0 kernel version 6.6.157.1-1. This flaw happens because the system mistakenly ignores certain checks when cleaning up old wifi records. This can cause security problems. Microsoft has released an update to fix this problem. Users of this Azure Linux version should update their systems as soon as possible.
- Published
- 13 Oct 2026
- CVSS
- 9.8
- Verified
- 15 Oct 2026
critical
Cisco / Priority 100
Cisco NX-OS Software NX-API Remote Code Execution Vulnerability
A serious security weakness in Cisco NX-OS Software's NX-API feature lets attackers remotely run harmful code or disrupt the device. This happens because the system does not properly check data sent to NX-API. Attackers can send a specially crafted HTTP request to take control or cause the system to crash and restart. Cisco has issued software updates to fix this issue. There are no known workarounds besides updating the software.
- Published
- 8 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
critical
Cisco / Priority 100
Cisco Meraki Security Hardening Release: October 2026
Cisco's engineering teams performed a thorough internal security review of their Meraki product line and discovered several security weaknesses that could affect multiple devices. These problems were found during testing and are not currently being exploited by attackers. Cisco has released software updates to strengthen security and fix these issues. There are no known workarounds, so customers should update their devices to the fixed software versions to protect against potential risks.
- Published
- 8 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
critical
Cisco / Priority 100
Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability
Cisco Nexus 3000 and 9000 Series Switches have a security flaw in their MPLS OAM feature. This flaw lets an attacker, without any login, send a specially crafted message to the switch and run harmful code as if they were the device owner. This can also crash the device and cause it to stop working. Cisco has released updates to fix this issue. There's no easy workaround other than disabling the MPLS OAM feature if it's not needed.
- Published
- 7 Oct 2026
- CVSS
- Not scored
- Verified
- 9 Oct 2026
critical Exploitation reported
Cisco / Priority 100
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
A vulnerability in Cisco Catalyst SD-WAN Manager’s API authentication allows attackers to bypass login controls by exploiting improper URL encoding. This grants remote attackers admin-level access to the management API without authentication. Cisco has released software updates that fix this issue, and no workaround fully addresses the vulnerability. Cisco advises upgrading to the updated software as soon as possible to secure systems.
- Published
- 2 Oct 2026
- CVSS
- Not scored
- Verified
- 3 Oct 2026
critical
Cisco / Priority 100
Cisco IOS XE Software Security Hardening Release: August 2026
Cisco discovered several security weaknesses in its IOS XE software during internal testing. These issues are not known to be actively exploited in the wild. Cisco released upgraded software versions to harden security and fix these vulnerabilities. There are no workarounds, so upgrading is the recommended action to protect your systems.
- Published
- 2 Oct 2026
- CVSS
- Not scored
- Verified
- 2 Oct 2026
critical
Cisco / Priority 100
Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026
Cisco discovered multiple security weaknesses in its Secure Firewall products during internal testing, including some that have already been exploited by attackers. These issues could allow unauthorized access or cause serious security problems. Cisco has released updated software versions to fix these vulnerabilities and strongly advises users to upgrade without delay since no workarounds are available.
- Published
- 18 Sep 2026
- CVSS
- Not scored
- Verified
- 19 Sep 2026
critical
Cisco / Priority 100
Cisco IOS XR Software Security Hardening Release: September 2026
Cisco conducted a thorough internal security review of its IOS XR Software and discovered multiple vulnerabilities not currently exploited in the wild. To enhance security, Cisco released software updates that fix these flaws. No temporary workarounds exist, so users should promptly update their devices to protected versions.
- Published
- 17 Sep 2026
- CVSS
- Not scored
- Verified
- 17 Sep 2026
critical Exploitation reported
Cisco / Priority 100
Cisco Secure Email Gateway SQL Injection Vulnerability
A critical security flaw was discovered in Cisco Secure Email Gateway devices. This flaw lets attackers send specially crafted emails with malicious code that can run commands on the device with full administrative rights. This means attackers can take control of the underlying system without needing to log in. Cisco has released updated software versions to fix this issue. There are no temporary workarounds available, so users should update their devices promptly to stay protected.
- Published
- 17 Sep 2026
- CVSS
- Not scored
- Verified
- 17 Sep 2026